summaryrefslogtreecommitdiff
path: root/meta/recipes-extended/rpcbind
diff options
context:
space:
mode:
authorJackie Huang <jackie.huang@windriver.com>2014-03-04 18:07:57 +0800
committerRichard Purdie <richard.purdie@linuxfoundation.org>2014-03-07 14:55:27 +0000
commit52f7a1b403eabc52ca104f752484ec1572f2d9dd (patch)
tree00876515381fbbe31b73a676a48d78548aab9d73 /meta/recipes-extended/rpcbind
parent01f640f2e878ef86db4138f422fdf74f5f41c8c5 (diff)
downloadopenembedded-core-52f7a1b403eabc52ca104f752484ec1572f2d9dd.tar.gz
openembedded-core-52f7a1b403eabc52ca104f752484ec1572f2d9dd.tar.bz2
openembedded-core-52f7a1b403eabc52ca104f752484ec1572f2d9dd.zip
rpcbind: add rpc user and run rpcbind daemon with rpc user
For security policy, change to run rpcbind daemon with rpc user just like Redhat does, so set the --with-rpcuser to rpc and add rpc user. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
Diffstat (limited to 'meta/recipes-extended/rpcbind')
-rw-r--r--meta/recipes-extended/rpcbind/rpcbind_0.2.1.bb8
1 files changed, 7 insertions, 1 deletions
diff --git a/meta/recipes-extended/rpcbind/rpcbind_0.2.1.bb b/meta/recipes-extended/rpcbind/rpcbind_0.2.1.bb
index d9eb1a2527..23219e01bd 100644
--- a/meta/recipes-extended/rpcbind/rpcbind_0.2.1.bb
+++ b/meta/recipes-extended/rpcbind/rpcbind_0.2.1.bb
@@ -37,7 +37,13 @@ INITSCRIPT_PARAMS = "start 12 2 3 4 5 . stop 60 0 1 6 ."
SYSTEMD_SERVICE_${PN} = "rpcbind.service"
SYSTEMD_AUTO_ENABLE = "disable"
-EXTRA_OECONF += " --enable-warmstarts "
+inherit useradd
+
+USERADD_PACKAGES = "${PN}"
+USERADD_PARAM_${PN} = "--system --no-create-home \
+ --shell /bin/false --user-group rpc"
+
+EXTRA_OECONF += " --enable-warmstarts --with-rpcuser=rpc"
do_install_append () {
mv ${D}${bindir} ${D}${sbindir}